The easiest, most secure way to use WireGuard and 2FA.
Go to file
David Anderson 68ddf134d7 wgengine/router/dns: issue ipconfig /registerdns when applying DNS settings.
Amazingly, there doesn't seem to be a documented way of updating network
configuration programmatically in a way that Windows takes notice of.
The naturopathic remedy for this is to invoke ipconfig /registerdns, which
does a variety of harmless things and also invokes the private API that
tells windows to notice new adapter settings. This makes our DNS config
changes stick within a few seconds of us setting them.

If we're invoking a shell command anyway, why futz with the registry at
all? Because netsh has no command for changing the DNS suffix list, and
its commands for setting resolvers requires parsing its output and
keeping track of which server is in what index. Amazingly, twiddling
the registry directly is the less painful option.

Fixes #853.

Signed-off-by: David Anderson <danderson@tailscale.com>
2020-10-29 20:05:38 -07:00
.github .github/workflows: add tests on Windows 2020-10-28 09:23:42 -07:00
atomicfile atomicfile: don't Chmod on windows 2020-07-15 12:31:40 -07:00
cmd cmd/tailscaled: update depaware.txt 2020-10-29 15:30:55 -07:00
control/controlclient version: use OSS repo's version when building. 2020-10-28 16:17:21 -07:00
derp version: use OSS repo's version when building. 2020-10-28 16:17:21 -07:00
disco wgengine/magicsock: run test DERP in mode where only disco packets allowed 2020-07-16 12:58:35 -07:00
internal Add tooldeps package to keep depaware pinned in go.mod. 2020-09-09 12:13:30 -07:00
ipn ipn: don't log redundant peer stats so often 2020-10-29 15:26:10 -07:00
log log/filelogger: move our Windows disk file writing+rotation package here 2020-10-29 14:59:44 -07:00
logpolicy version: use OSS repo's version when building. 2020-10-28 16:17:21 -07:00
logtail logtail/filch: skip a broken test on Windows 2020-10-14 21:33:01 -07:00
metrics metrics: add LabelMap.GetFloat 2020-07-19 12:31:12 -07:00
net net/netcheck: fix tests on Windows 2020-10-28 09:10:35 -07:00
paths paths, cmd/tailscaled: on Windows, don't try to migrate from legacy relay.conf 2020-07-13 08:59:54 -07:00
portlist portlist: fix tests on Windows when not running as Administrator 2020-10-28 09:19:41 -07:00
safesocket safesocket: gofmt 2020-07-20 14:40:19 -07:00
scripts scripts: don't descend into .git for license header check 2020-09-10 09:23:33 -07:00
smallzstd smallzstd: new package that constructs zstd small encoders/decoders. 2020-07-02 16:13:06 -07:00
syncs syncs: add Watch, for monitoring mutex contention 2020-09-11 11:36:07 -07:00
tailcfg cmd/tailscale/cli, tailcfg: allow tag without "tag:" prefix in 'tailscale up' 2020-10-28 07:59:57 -07:00
tempfork all: use testing.T.TempDir 2020-10-02 20:31:31 -07:00
tsconst net/netns: add windows support. 2020-09-14 16:28:49 -07:00
tstest wgengine/magicsock: make test pass on Windows and without firewall dialog box 2020-10-28 09:02:08 -07:00
tstime tstime: hand-implement parseInt for specific needs of rfc3339 parsing. 2020-04-14 12:36:55 -07:00
tsweb tsweb: when unwrapping HTTPError, record the user-facing message also in the log 2020-09-17 10:12:48 -04:00
types types/logger: fix LogOnChange to pass through format/args to underlying logger 2020-10-29 15:22:29 -07:00
util util/uniq: add new package 2020-10-02 11:00:56 -07:00
version version: fix documentation. 2020-10-28 16:29:26 -07:00
wgengine wgengine/router/dns: issue ipconfig /registerdns when applying DNS settings. 2020-10-29 20:05:38 -07:00
.gitattributes .gitattributes: add a smudge filter for go.mod. 2020-02-19 20:02:02 -05:00
.gitignore cmd/relaynode: drop local --acl-file in favour of central packet filter. 2020-02-20 00:15:43 -05:00
AUTHORS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
build_dist.sh version: use OSS repo's version when building. 2020-10-28 16:17:21 -07:00
CODE_OF_CONDUCT.md Add a code of conduct. 2020-02-10 22:16:30 -08:00
Dockerfile Dockerfile: install iproute2 in the container image. 2020-05-10 17:12:17 -07:00
go.mod go.mod: update to new wireguard-go. 2020-10-26 19:23:01 +00:00
go.sum go.sum: update 2020-10-27 09:25:29 -07:00
LICENSE Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
Makefile Makefile: remove tsshd from depaware 2020-09-11 11:09:32 -07:00
PATENTS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
README.md version: use OSS repo's version when building. 2020-10-28 16:17:21 -07:00
SECURITY.md Add a SECURITY.md for vulnerability reports. 2020-02-11 10:26:41 -08:00

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains all the open source Tailscale client code and the tailscaled daemon and tailscale CLI tool. The tailscaled daemon runs primarily on Linux; it also works to varying degrees on FreeBSD, OpenBSD, Darwin, and Windows.

The Android app is at https://github.com/tailscale/tailscale-android

Using

We serve packages for a variety of distros at https://pkgs.tailscale.com .

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers that are not open source.

Building

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

We only guarantee to support the latest Go release and any Go beta or release candidate builds (currently Go 1.15) in module mode. It might work in earlier Go versions or in GOPATH mode, but we're making no effort to keep those working.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

About Us

We are apenwarr, bradfitz, crawshaw, danderson, dfcarney, josharian from Tailscale Inc. You can learn more about us from our website.

WireGuard is a registered trademark of Jason A. Donenfeld.